diff --git a/mod/scorm/datamodels/aicclib.php b/mod/scorm/datamodels/aicclib.php
index 64649883df5..727fa4f9690 100644
--- a/mod/scorm/datamodels/aicclib.php
+++ b/mod/scorm/datamodels/aicclib.php
@@ -215,10 +215,10 @@ function scorm_parse_aicc($pkgdir,$scormid) {
 
             //print_r($sco);
             if (get_record('scorm_scoes','scorm',$scormid,'identifier',$sco->identifier)) {
-                $id = update_record('scorm_scoes',$sco);
+                $id = update_record('scorm_scoes',addslashes_recursive($sco));
                 unset($oldscoes[$id]);
             } else {
-                $id = insert_record('scorm_scoes',$sco);
+                $id = insert_record('scorm_scoes',addslashes_recursive($sco));
             }
 
             if ($launch == 0) {
@@ -245,11 +245,11 @@ function scorm_parse_aicc($pkgdir,$scormid) {
                         $id = null;
                         if ($oldscoid = scorm_array_search('identifier',$sco->identifier,$oldscoes)) {
                             $sco->id = $oldscoid;
-                            $id = update_record('scorm_scoes',$sco);
+                            $id = update_record('scorm_scoes',addslashes_recursive($sco));
                             delete_records('scorm_scoes_data','scoid',$oldscoid);
                             unset($oldscoes[$oldscoid]);
                         } else {
-                            $id = insert_record('scorm_scoes',$sco);
+                            $id = insert_record('scorm_scoes',addslashes_recursive($sco));
                         }
                         if (!empty($id)) {
                             unset($scodata);
@@ -257,32 +257,32 @@ function scorm_parse_aicc($pkgdir,$scormid) {
                             if (isset($element->web_launch)) {
                                 $scodata->name = 'parameters';
                                 $scodata->value = $element->web_launch;
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                             if (isset($element->prerequisites)) {
                                 $scodata->name = 'prerequisites';
                                 $scodata->value = $element->prerequisites;
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                             if (isset($element->max_time_allowed)) {
                                 $scodata->name = 'max_time_allowed';
                                 $scodata->value = $element->max_time_allowed;
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                             if (isset($element->time_limit_action)) {
                                 $scodata->name = 'time_limit_action';
                                 $scodata->value = $element->time_limit_action;
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                             if (isset($element->mastery_score)) {
                                 $scodata->name = 'mastery_score';
                                 $scodata->value = $element->mastery_score;
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                             if (isset($element->core_vendor)) {
                                 $scodata->name = 'datafromlms';
                                 $scodata->value = eregi_replace('<cr>', "\r\n", $element->core_vendor);
-                                $dataid = insert_record('scorm_scoes_data',$scodata);
+                                $dataid = insert_record('scorm_scoes_data',addslashes_recursive($scodata));
                             }
                         }
                         if ($launch==0) {